#teamcity — Public Fediverse posts

JetBrains Cadence Breach Exposes AWS Credentials, User Data

A critical deserialization flaw, CVE-2026-63077, was exploited by unknown attackers to breach JetBrains' Cadence environment, compromising AWS credentials, backups, and user data. The vulnerability, scoring 9.8, allowed threat actors to bypass authentication and execute malicious commands with ease.

https://osintsights.com/jetbrains-cadence-breach-exposes-aws-credentials-user-data?utm_source=mastodon&utm_medium=social

#Cve202663077 #Jetbrains #Teamcity #AwsCredentialsExposure #DeserializationFlaw

Attackers Breached JetBrains Cadence via Unpatched TeamCity, Extracting AWS Credentials

Indicators extracted from public reporting. Source: https://blog.jetbrains.com/pycharm/2026/08/cadence-security-incident-august-2026/

Pulse ID: 6a9c499896e47e392dc6ec17
Pulse Link: https://otx.alienvault.com/pulse/6a9c499896e47e392dc6ec17
Pulse Author: CyberHunter_NL
Created: 2026-09-05 16:55:52

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#AWS #CyberSecurity #HTTP #HTTPS #InfoSec #JetBrains #OTX #OpenThreatExchange #RCE #TeamCity #bot #CyberHunter_NL

An unpatched JetBrains Cadence server exposed cloud infrastructure, AWS credentials, and critical developer secrets. Discover the details of this severe breach.

#JetBrains #Cadence #TeamCity #CyberSecurity #DataBreach

https://securityonline.info/jetbrains-cadence-server-hacked/?utm_source=mastodon&utm_medium=jetpack_social

TeamCity Vulnerability CVE-2026-63077 Actively Exploited, Australia Warns - https://www.redpacketsecurity.com/australia-warns-of-active-exploitation-of-critical-teamcity-server-flaw/

#threatintel #TeamCity #vulnerability #exploitation

CVE-2026-63077 is a TeamCity unauthenticated RCE, now exploited in the wild with a public PoC. Australia's ACSC confirms active attacks.

#TeamCity #CVE202663077 #RCE #CyberSecurity #JetBrains #CISAKEV

https://securityonline.info/teamcity-cve-2026-63077/?utm_source=mastodon&utm_medium=jetpack_social

CVE Alert: CVE-2026-63077 - JetBrains - TeamCity - https://www.redpacketsecurity.com/cve-alert-cve-2026-63077-jetbrains-teamcity/

#OSINT #ThreatIntel #CyberSecurity #cve-2026-63077 #jetbrains #teamcity

#JetBrains warns of critical #TeamCity remote code execution flaw

https://www.bleepingcomputer.com/news/security/jetbrains-warns-of-critical-teamcity-remote-code-execution-flaw/

#cybersecurity

JetBrains emitiu um aviso urgente sobre uma vulnerabilidade crítica no TeamCity que permite execução remota de código. A falha, classificada como CVE-2026-63077, pode ser explorada por atacantes para alcançar a execução remota de código nos sistemas vulneráveis.

🔗 https://tugatech.com.pt/t88336-jetbrains-alerta-para-falha-critica-no-teamcity-que-permite-execucao-remota-de-codigo

#alerta #falha #teamcity 

Kritische Schwachstelle in #JetBrains #TeamCity entdeckt | Developer https://www.heise.de/news/Kritische-Schwachstelle-in-JetBrains-TeamCity-entdeckt-11381504.html #Patchday @jetbrains

Angriffe auf Cisco SD-WAN, #Zimbra, #TeamCity, #PaperCut und mehr beobachtet | Security https://www.heise.de/news/Angriffe-auf-Cisco-SD-WAN-Zimbra-TeamCity-PaperCut-und-mehr-beobachtet-11265225.html #Patchday #XSS #CrossSiteScripting #exploit

BlorboBash attack for @pandemonicangel

#BlorboBash2026 #BlorboBash #CreativeClash #TeamCity #ffxiv #MaricoDraws

BlorboBash attack for @pandemonicangel

#BlorboBash2026 #BlorboBash #CreativeClash #TeamCity #ffxiv #MaricoDraws

I like #GitLab, and I like their CI/CD but compared to #JetBrains #TeamCity it feels incredibly underpowered when it comes to cross project pipelines.

I've built multiproject chains of configs in team city that know to wait on various builds, automatically pull the latest artifacts, and deploy to a spread of endpoints. Doing a Y shaped pipeline in Girls has been exhausting.

Today I learned some of my team has been using deploy scripts in #TeamCity to rewrite code for test sites and special builds.

I cannot stress enough how bad of a habit this is. If you are redirecting code, it should be done via configuration file changes not find/replace powershell scripts run on the codebase. This should be treated as dangerous since it could be used to circumvent security reviews if it happened on the production configuration.

#ci_cd #softwareDevelopment

Наш опыт эксплуатации Airflow в Kubernetes

Apache Airflow — это один из самых популярных ETL-шедулеров. ETL-процессы — это когда мы выбираем интересующие нас данные, приводим их к агрегированному виду и сохраняем для дальнейшего использования. И это присутствует везде, где есть необходимость анализа данных. Соответственно, Airflow предназначен для того, чтобы запускать пайплайны обработки данных.

https://habr.com/ru/companies/vk/articles/836256/

#kubernetes #airflow #etl #teamcity #bitbucket #helm

Does UBT put the timestamp or changelist of a build anywhere?

Is there any way to get the current version of a Shipping build? A console command maybe?

And if not, what's the easiest/fastest way to do so with #Teamcity?

#unreal #unrealengine #ue5

Трендовые уязвимости марта: обновляйтесь и импортозамещайтесь

Хабр, привет! Я Александр Леонов, и мы с командой аналитиков Positive Technologies каждый месяц изучаем информацию о недостатках безопасности из баз, бюллетеней безопасности вендоров, социальных сетей, блогов, телеграм-каналов, баз эксплойтов, публичных репозиториев кода и определяем трендовые уязвимости. То есть те, которые либо уже эксплуатируются вживую, либо могут начать эксплуатироваться в ближайшее время. Сегодня расскажу про самые опасные в марте — всего их было пять. Какие уязвимости были в тренде в марте

https://habr.com/ru/companies/pt/articles/806519/

#vulnerability_management #cve #трендовые_уязвимости #удаленное_выполнение_кода #повышение_привилегий #внедрение_sqlкода #teamcity #microsoft #ядро_windows #forticlient_ems

Zero Day Initiative security advisory reveals additional information on CVE-2024-31138 (4.6 medium, CVSSv3.1:AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) 🔗 https://www.zerodayinitiative.com/advisories/ZDI-24-360/

This vulnerability allows remote attackers to execute arbitrary script on affected installations of JetBrains TeamCity. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

The specific flaw exists within the handling of the os parameter provided to the AgentDistributionSettingsController.doPost method. The issue results from the lack of proper validation of user-supplied data, which can lead to the injection of arbitrary script. An attacker can leverage this vulnerability to execute script in the context of the current user.

#JetBrains #TeamCity #vulnerability #CVE_2024_31138

26 Security Issues Patched in TeamCity https://www.securityweek.com/26-security-issues-patched-in-teamcity/ #Vulnerabilities #vulnerability #TeamCity

26 Security Issues Patched in TeamCity https://www.securityweek.com/26-security-issues-patched-in-teamcity/ #Vulnerabilities #vulnerability #TeamCity